handle tarballs w/ and w/out checksum together

This makes it easier to drop the checksum from tarball's name on update,
as there is no change needed outside download.lst.

Change-Id: I474387fdf6d1cdee682011cf9cd39c36be2c131c